This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xsgeqHycpDDJ8oVfXE6ofjpdPww.roa File: xsgeqHycpDDJ8oVfXE6ofjpdPww.roa (raw, json) Hash identifier: dlAJTOtdWcczqCD/dhRKriqJ4A5ALzTRIw+K/nSzqL0= Subject key identifier: C6:C8:1E:A8:7C:9C:A4:30:C9:F2:85:5F:5C:4E:A8:7E:3A:5D:3F:0C Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E74617D1D3FFD024D891BD7ED3AE7 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xsgeqHycpDDJ8oVfXE6ofjpdPww.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207019 IP address blocks: 193.93.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:74:61:7d:1d:3f:fd:02:4d:89:1b:d7:ed:3a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6c81ea87c9ca430c9f2855f5c4ea87e3a5d3f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:7f:c3:b5:96:c8:d4:27:ef:6e:ae:c1:02: 10:60:12:42:8a:c5:70:bf:1e:cf:d3:8a:ac:0c:28: 07:17:b9:5d:7b:4e:be:37:66:e4:0d:fb:e7:a0:5c: e4:3b:ef:92:e3:a8:58:79:e0:32:51:39:57:a8:2c: eb:a4:1c:c7:37:bd:03:cc:44:fc:cb:fa:af:a9:46: 3f:9f:ce:8f:28:80:66:ad:2d:1e:38:a1:fe:40:32: 54:92:9a:bd:ff:ce:f4:c7:72:bd:5f:5a:60:04:3d: fa:66:4a:01:b7:17:d1:30:75:02:61:1a:32:df:20: be:9c:65:23:56:61:c6:4c:3f:8f:e9:b6:0c:1f:3d: c8:eb:ec:05:f3:58:25:06:0b:63:da:38:4f:96:2e: 4b:b0:2f:15:25:af:0d:fd:94:b7:a1:8c:5a:08:41: 7e:74:6a:37:9a:6f:2c:f2:c6:5b:ec:c7:3c:f2:15: d8:df:83:cb:35:f5:b0:25:49:4e:ea:1f:32:97:8e: 1b:d5:ad:7e:cd:00:1d:3d:f9:57:83:3a:ed:c3:b4: a8:50:a5:94:75:cb:ee:a7:a3:3f:3b:01:5b:38:69: fb:a5:03:f5:9c:57:58:d2:91:c3:77:60:0a:ad:5a: 07:c4:18:e2:de:d5:d0:fd:e1:66:e7:34:77:bc:e9: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:1E:A8:7C:9C:A4:30:C9:F2:85:5F:5C:4E:A8:7E:3A:5D:3F:0C X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xsgeqHycpDDJ8oVfXE6ofjpdPww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.54.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:90:cd:04:89:af:3a:b2:20:83:db:e8:57:e6:4e:66:66:51: 25:2f:d2:7b:2f:8b:50:77:80:6f:a0:36:9d:c3:a2:0a:92:61: e6:d4:70:b1:21:27:8f:24:b7:b3:b7:25:2d:95:28:89:dc:9c: a0:65:90:8f:e1:7f:0d:d3:16:d6:0b:e0:8f:a4:eb:73:7f:d7: 1b:fe:5c:01:73:16:8b:3c:f5:e9:bd:95:8a:81:f5:6e:ed:17: 70:3b:23:40:69:33:a4:7d:21:b8:53:bc:5f:9e:b1:c5:64:cd: 77:55:62:68:50:0e:d1:cd:20:23:df:83:69:26:df:76:dc:a9: b8:9a:2a:a9:ea:1f:6c:8b:d5:73:76:e3:f3:7f:73:80:47:87: bb:af:c4:37:bd:de:db:53:53:11:c7:7b:f0:67:3a:1c:64:ac: e8:7a:2c:20:27:d9:ff:38:04:95:0e:c5:d2:1a:41:7c:eb:64: 11:72:ec:3a:0c:80:77:33:d9:ba:52:b3:cf:f8:a0:1c:f2:a2: ca:2b:fd:98:4e:4f:02:f1:ed:5b:68:50:5d:2a:ed:ba:39:8a: c8:21:a0:00:18:b1:0f:e6:b1:6f:81:ef:a5:94:ec:c1:9c:95: 7d:2b:66:e2:49:ac:4b:94:bf:f3:4b:8c:65:c7:04:27:ad:0d: d9:d6:db:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnRhfR0//QJNiRvX7TrnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmM4MWVhODdjOWNhNDMwYzlmMjg1NWY1YzRlYTg3ZTNhNWQzZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRJ/w7WWyNQn726uwQIQYBJCisVw vx7P04qsDCgHF7lde06+N2bkDfvnoFzkO++S46hYeeAyUTlXqCzrpBzHN70DzET8 y/qvqUY/n86PKIBmrS0eOKH+QDJUkpq9/870x3K9X1pgBD36ZkoBtxfRMHUCYRoy 3yC+nGUjVmHGTD+P6bYMHz3I6+wF81glBgtj2jhPli5LsC8VJa8N/ZS3oYxaCEF+ dGo3mm8s8sZb7Mc88hXY34PLNfWwJUlO6h8yl44b1a1+zQAdPflXgzrtw7SoUKWU dcvup6M/OwFbOGn7pQP1nFdY0pHDd2AKrVoHxBji3tXQ/eFm5zR3vOku3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbIHqh8nKQwyfKFX1xOqH46XT8MMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEveHNnZXFIeWNwRERKOG9WZlhFNm9manBkUHd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV02MA0G CSqGSIb3DQEBCwUAA4IBAQB+kM0Eia86siCD2+hX5k5mZlElL9J7L4tQd4BvoDad w6IKkmHm1HCxISePJLeztyUtlSiJ3JygZZCP4X8N0xbWC+CPpOtzf9cb/lwBcxaL PPXpvZWKgfVu7RdwOyNAaTOkfSG4U7xfnrHFZM13VWJoUA7RzSAj34NpJt923Km4 miqp6h9si9VzduPzf3OAR4e7r8Q3vd7bU1MRx3vwZzocZKzoeiwgJ9n/OASVDsXS GkF862QRcuw6DIB3M9m6UrPP+KAc8qLKK/2YTk8C8e1baFBdKu26OYrIIaAAGLEP 5rFvge+llOzBnJV9K2biSaxLlL/zS4xlxwQnrQ3Z1ttN -----END CERTIFICATE-----Generated at Mon Jan 19 13:55:14 2026 by rpki-client